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THE AMENDMENTS 

In The Claims 

1. (Currently Amended) A system for protecting sensitive information in a network 
comprising: 

a network component for storing the sensitive information necessary for 
authorized network access; and 

a network device, attachable to the network, that lacks the sensitive information 
necessary for authorized network access and is inoperative, at least in part, until the sensitive 
information is stored therein; 

wherein, when the network device is attached to the network, the sensitive 
information necessary for authorized network access is downloaded from the network component 
and stored in the network device so that the network device becomes operational; 

wherein, when the network device is disconnected from the network, the sensitive 
information necessary for authorized network access is erased from the network device, thereby 
making the network device inoperative at least in part and removing the sensitive information 
necessary for authorized network access from the network device; 

wherein the network component is located in a secure environment comprising 
security for both physical access and network commimications . 

2. (Currently Amended) The system of claim 1, wherein the sensitive information 
necessary for authorized network access is selected from the group consisting of configuration 
information, a software image, and a combination of the forgoing; 

wherein the software image and the configuration information are bundled with 
self-extracting switch software . 

3. (Previously Presented) The system of claim 2, wherein the configuration 
information is selected from the group consisting of a password, a user ID, a network security 
key, and any combination of the forgoing. 

4. (Original) The system of claim 1, wherem the network device includes a volatile 
memory for storing the sensitive infonnation. 
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5. (Currently Amended) The system of claim 1, wherein the network component is a 
LAN switc h comprismg a server utilizing Simple Network Management Protocol (SNMP1 . 

6. (Currently Amended) The system of claim 1, wherein the network device is-a 
wir e l e ss aoceoo point (AP) provides network access to a voice over IP phone, wherein the voice 
over IP phone stores configuration data and software images in volatile memory . 

7. (Currently Amended). The system of claim 1, wherein the network component i s 
locatod in a soouro omironmont device is powered bv a network cable using Power over Ethernet 
(?oE\ 

8. (Currently Amended) A method for protecting sensitive information in a network 
comprising: 

storing Ae sensitive information necessary for authorized network access at a 
network component; 

attaching a network device to the network, the network device lacking the 
sensitive information necessary for authorized network access and being inoperative, at least in 
part, until the sensitive information necessary for authorized network access is stored therein; 

downloading the sensitive information necessary for authorized network access 
from the network component to the network device; 

storing the sensitive information necessary for authorized network access in the 
network device so that the network device becomes operational on the network; and 

when the network device is disconnected from the network, erasing tiie sensitive 
information necessary for authorized network access from the network device, thereby rendering 
the network device inoperative, at least in partj 

wherein the network component is located in a secure environment comprising 
security for both physical access and network communications . 

9. (Currently Amended) The method of claim 8, wherein the sensitive information 
necessary for authorized network access is selected from the group consisting of configuration 
information, a software image, and a combination of the forgoing; 

wherein the software image and the configuration information are bundled with 
self-extracting switch software . 
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10. (Previously Presented) The method of claim 9, wherein the configuration 
information is selected from the group consisting of a password, a user ID, a network security 
key, and any combination of the forgoing. 

11. (Previously Presented) The method of claim 8 wherein the network device 
includes a volatile memory for storing the sensitive information necessary for authorized network 
access. 

1 2. (Currently Amended) The method of claim 8, wherein the network component is a 
LAN switch comprising a server utilizing Simple Network Management Protocol CSNMPV 

13. (Currently Amended) The method of claim 8, wherein the network device is-a 
wirel e ss acc e ss point (AP) provides network access to a voice over IP phone, wherein the voice 
over IP phone stores configuration data and software images in volatile memory . 

14. (Currently Amended) The method of claim 8, wherein the network compon e nt is 
located in a seouro onviroiun e nt device is powered bv a network cable using Power over Ethernet 
(PoEl 

15. (Currently Amended) A device that is non-operational on a network unless the 
device is storing configuration information necessary for authorized network access comprising: 

an interface for communicating with the network; 

a memory whose contents are erased upon loss of power to the device; and 

means for downloading from the network and storing in the memory the configuration 
information necessary for authorized network access so that Ae configuration information 
necessary for authorized network access is not retained when the device is powered down, 
wherein the configuration information necessary for authorized network access, when stored in 
the memory, permits the device to operate on the network; 

wherein title device is a wireless access point (AP): 

wherein the network component is located in a secure environment comprising security 
for both physical access and network communications . 

1 6. (Original) The device of claim 1 5, wherein the downloading means includes: 
a bootstrap program for downloading from the network an executable image. 
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18. (Original) The device of claim 16, flirther comprising means for storing the 
executable image in the memory. 

19. (Currently Amended) The device of claim 15,.wherein the device is a vviroloss 
000000 point (AP) provides net work access to a voice over IP phone, wherein the voice over IP 
phones st ores the configuration data and software images in volatile memory . 

20. (Previously Presented) The device of claim 19, wherein the configuration 
information necessary for authorized network access includes security information for allowing 
end user devices to access the network through the wireless AP. 

21. (Previously Presented) The device of claim 15, wherein the configuration 
information necessaiy for authorized network access includes security information for allowing 
the device access to the network. 

22. (Currently Amended) A network system, comprising: 

a Switch for attaching a device to a network so that information can be communicated 
between the device and the network system, wherein the device is not fully operational when first 
connected to the switch; and 

means for downloading configuration information necessary for authorized network 
access from the network system to a volatile memory included in the device in response to a 
request from the device, so that the configuration information necessary for authorized network 
access is not retained in the device when the device is powered down, the device being operable 
on the network after the configuration information necessaiy for authorized network access is 
downloaded into the volatile memory^ 

wherein the device is a wireless access point TAP): 

wherein the network component is located in a secure environment comprising security 
for both physical access and network communications . 

23 . (Original) The network system of claim 22, fiirther comprising: 

means for downloading an executable image from the network system to the device, 

24. (Original) The network system of claim 23, wherein the request is generated by 
running the executable image on the device. 

25. (Currently Amended) The network system of claim 22,. wherein the device is a 
wir e l e s s acc e ss point (AP) powered by a network cable using Power over Ethernet (PoE). 

5 

DM_US:21654387_1 



Application No. 10/773,394 
Attorney Docket No. 02453. 0020.NPUS00 



26. (Previously Presented) The network system of claim 23 , wherein the configuration 
information necessary for authorized network access includes security information for allowing 
end user devices to access the network system through a wireless AP. 

27. (Original) The network system of claim 22, wherein the configuration information 
necessary for authorized network access includes security information for allowing the device 
access to the network. 

28. (Original) The network system of claim 22, further comprising means for 
authenticating the device on the network. 

29. (Withdrawn) A system, comprising: 
a device including 

a network interface, 

a memory whose contents are erased upon loss of power to the device, and 

a bootstrap program for downloading and storing an executable image in 
the memory; and 
a network including 

a port for connecting to the network interface so that information can be 
communicated between the device and the network, wherein the device is not 
fully operational when first cotmected to the port, and 

means for downloading the executable image fi"om the network into the 
memory in response to a request from the bootstrap program, and 

means for downloading configuration information fi-om the network to the 
memory in response to a request generated by running the executable image at the 
device, so that the information is not retained in the device when the device is 
powered down, the device being operational on the network after the 
coiifiguration information is downloaded into the memory. 

30. (Withdrawn) The system of claim 29, wherein the device is a wireless access 
point (AP). 
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31. (Withdrawn) The system of claim 30, wherein the configuration information 
includes security information for allowing end user devices to access the network through the 
wireless AP. 

32. (Withdrawn) The system of claim 29, wherein the configuration information 
includes security information for allowing the device access to the network. 

33. (Withdrawn) The system of claim 29, wherein the network further comprises 
means for authenticating the device on the network. 

34. (Withdrawn) A method for operating a device on a network, comprising: 
attaching the device to the network so that information can be communicated 

between the device and the network; 

downloading an executable image from the network to the device; 

executing the downloaded executable image at the device to obtain configuration 
information firom the network; and 

storing the configuration information in a volatile memory included in the device, 
the device being operable on the network after the configuration information is 
downloaded to tiie volatile memory, wherein the information is not retained in the device 
when the device is de-powered. 

35. (Withdrawn) The method of claim 34, wherein the device is a wireless access 
point (AP). 

36. (Withdrawn) The method of claim 35, wherein the configuration information 
includes security information for allowing end user devices to access the network through the 
wireless AP. 

37. (Withdrawn) The method of claim 34, wherein the configuration information 
includes seciarity information for allowing the device access to the network. 

3 8 . (Withdrawn) The method of claim 34, further comprising: 
authenticating the device on the network. 
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